Multisig3 of 7 signers must approveIt can only set bounded parameters — it cannot move deposits or change the codeSafe 0xE6A4…2075
TimelockNot needed — the code cannot change
Track record
Through market stressCame through all 2August 2024 crash — deposits grew 26%October 2025 liquidation cascade — kept 60% of its deposits
Exploit history
21 Nov 2025 — DNS Hijack$700K lost · Users were fully reimbursedWebsite hijack, not the contracts; affected users compensated through the Aero Foundation's grant program (claims closed 1 Feb 2026) · Report